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Peer to peer networks: Tarzan: a peer-to-peer anonymizing network layer 
Michael J. Freedman, Robert Morris 

November 2002 Proceedings of the 9th ACM conference on Computer and 
communications security 

Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings, index 
terms 



Full text available: l jg| pdf ( 242.72 KB) 



Tarzan is a peer-to-peer anonymous IP network overlay. Because it provides IP service, 
Tarzan is general-purpose and transparent to applications. Organized as a decentralized 
peer-to-peer overlay, Tarzan is fault-tolerant, highly scalable, and easy to manage.Tarzan 
achieves its anonymity with layered encryption and multi-hop routing, much like a 
Chaumian mix. A message initiator chooses a path of peers pseudo-randomly through a 
restricted topology in a way that adversaries cannot easily influenc ... 

Keywords: IP tunnels, anonymity, cover traffic, distributed trust, mix-nets, overlay 
networks, peer-to-peer 



2 Roaming and handoff mana g ement: MobileNAT: a new technique for mobility across j| 
heterogeneous address spaces 

Milind Buddhikot, Adiseshu Hari, Kundan Singh, Scott Miller 

September 2003 Proceedings of the 1st ACM international workshop on Wireless 
mobile applications and services on WLAN hotspots 

Publisher: ACM Press 

Full text available: ^| pdf(303.26 KB ) Additional Information: full citation , abstract , references , index terms 

We propose a new network layer mobility architecture called MobileNAT to efficiently 
support micro and macro-mobility in and across heterogeneous address spaces common 
in emerging public networks. The key ideas in this architecture are as follows: (1) Use of 
two IP addresses -- an invariant virtual IP address for host identification at the application 
layer and an actual routable address at the network layer that changes due to mobility. 
Since physical address has routing significance only withi ... 

Keywords: MobileNAT, mobility 




3 



http://portal.acm.org/resu^ 8/1/06 



Results (page 1): +virtual +private +network +access +server, ^secure +socket +layer ext... Page 2 of 6 



Business-to-business interactions: issues and enablin g technologies 

B. Medjahed, B. Benatallah, A. Bouguettaya, A. H. H. Ngu, A. K. Elmagarmid 

May 2003 The VLDB Journal — The International Journal on Very Large Data Bases, 

Volume 12 Issue 1 
Publisher: Springer-Verlag New York, Inc. 

Full text available: ^| pdf(558,34 KB) Additional Information: full citation , abstract , citings , index terms 

Business-to-Business (B2B) technologies pre-date the Web. They have existed for at least 
as long as the Internet. B2B applications were among the first to take advantage of 
advances in computer networking. The Electronic Data Interchange (EDI) business 
standard is an illustration of such an early adoption of the advances in computer 
networking. The ubiquity and the affordability of the Web has made it possible for the 
masses of businesses to automate their B2B interactions. However, several issu ... 

Keywords: B2B Interactions, Components, E-commerce, EDI, Web services, Workflows, 
XML 



Network securit y, filters and firewalls 
Darren Bolding 

September 1995 Crossroads, volume 2 issue l 
Publisher: ACM Press 

Full text available: jjg html(25.57 KB) Additional Information: full citation , index terms 



5 Desi g n of a hi g h-performance ATM firewall 
Jun Xu, Mukesh Singhal 

August 1999 ACM Transactions on Information and System Security (TISSEC), volume 2 

Issue 3 
Publisher: ACM Press 

Full text available: ^ pdf(143.19 KB ) Additional Information: full citation , abstract , references , index terms 

A router-based packet-filtering firewall is an effective way of protecting an enterprise 
network from unauthorized access. However, it will not work efficiently in an ATM network 
because it requires the termination of end-to-end ATM connections at a packet-filtering 
router, which incurs huge overhead of SAR (Segmentation and Reassembly). Very few 
approaches to this problem have been proposed in the literature, and none is completely 
satisfactory. In this paper we present the hardware desig ... 

Keywords: TCP/IP, asynchronous transfer mode, firewall, packet filtering, switch 
architecture 




6 Qb ject Globe: Ubiquitous query processin g on the Internet Q 
R. Braumandl, M. Keidl, A. Kemper, D. Kossmann, A. Kreutz, S. Seltzsam, K. Stocker 
August 2001 The VLDB Journal — The International Journal on Very Large Data 

Bases, Volume 10 Issue 1 
Publisher: Springer-Verlag New York, inc. 

Full text available: ^| pdf (251.44 KB ) Additional Information: full citation , abstract , citin gs, index terms 

We present the design of ObjectGlobe, a distributed and open query processor for 
Internet data sources. Today, data is published on the Internet via Web servers which 
have, if at all, very localized query processing capabilities. The goal of the ObjectGlobe 
project is to establish an open marketplace in which data and query processing 
capabilities can be distributed and used by any kind of Internet application. Furthermore, 
ObjectGlobe integrates cycle providers (i.e., machi ... 
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Keywords: Cycle-, function- and data provider, Distributed query processing, Open 
systems, Privacy, Quality of service, Query optimization, Security 



Separatin g key mana g ement from file s ystem securit y 

David Mazieres, Michael Kaminsky, M. Frans Kaashoek, Emmett Witchel 

December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 

'99, Volume 33 Issue 5 
Publisher: ACM Press 

Full text available* fSi pdfd 77 MB) Additional Information: full citation , abstract , references , citing s, index 
^ terms 

No secure network file system has ever grown to span the Internet. Existing systems all 
lack adequate key management for security at a global scale. Given the diversity of the 
Internet, any particular mechanism a file system employs to manage keys will fail to 
support many types of use. We propose separating key management from file system 
security, letting the world share a single global file system no matter how individuals 
manage keys. We present SFS, a secure file system that avoids internal ... 

The state of the art in locally distributed Web-server systems 
Valeria Cardellini, Emiliano Casalicchio, Michele Colajanni, Philip S. Yu 
June 2002 ACM Computing Surveys (CSUR), volume 34 issue 2 
Publisher: ACM Press 

Full text available* fiJl dfd 41 MB) Additional Information: full citation , abstract , references , citings , index 
™ terms 

The overall increase in traffic on the World Wide Web is augmenting user-perceived 
response times from popular Web sites, especially in conjunction with special events. 
System platforms that do not replicate information content cannot provide the needed 
scalability to handle large traffic volumes and to match rapid and dramatic changes in the 
number of clients. The need to improve the performance of Web-based services has 
produced a variety of novel content delivery architectures. This article w ... 

Keywords: Client/server, World Wide Web, cluster-based architectures, dispatching 
algorithms, distributed systems, load balancing, routing mechanisms 



9 Fast det e ction of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 
Studies on Collaborative research 

Publisher: IBM Press 

Full text available: ^ pdf(4.21 MB) Additional Information: full citation , abstract , references , index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

10 Client-server computing 
^ Alok Sinha 

July 1992 Communications of the ACM, volume 35 issue 7 

Publisher: ACM Press 
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review 



Keywords: client-server computing 

11 A taxonomy of Data Grids for distributed data sharing, management, and processing Q 
Srikumar Venugopal, Rajkumar Buyya, Kotagiri Ramamohanarao 
June 2006 ACM Computing Surveys (CSUR), volume 38 issue l 
Publisher: ACM Press 

Full text available: ^pdf(1.70 MB) Additional Information: full citation , abstract , references , index terms 

Data Grids have been adopted as the next generation platform by many scientific 
communities that need to share, access, transport, process, and manage large data 
collections distributed worldwide. They combine high-end computing technologies with 
high-performance networking and wide-area storage management techniques. In this 
article, we discuss the key concepts behind Data Grids and compare them with other data 
sharing and distribution paradigms such as content delivery networks, peer-to-peer n ... 

Keywords: Grid computing, data-intensive applications, replica management, virtual 
organizations 

12 The J u piter audio/video architecture: secure multimedia in network places Q 
Pavel Curtis, Michael Dixon, Ron Frederick, David A. Nichols 

January 1995 Proceedings of the third ACM international conference on Multimedia 
Publisher: ACM Press 

Full text available: g| htm(72.37 KB ) Additional Information: full citation , references , citings, index terms 
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For the past couple of years, increasing number of wireless local area networks (WLANs), 
based on the IEEE 802.11 protocols, have been deployed in various types of locations, 
including homes, schools, airports, business offices, government buildings, military 
facilities, coffee shops, book stores, as well as many other venues. One of the primary 
advantages offered by WLAN is its ability to provide untethered connectivity to portable 
devices, such as wireless laptops and PDAs. In some remote comm ... 
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We present a discrete-event network simulator, called Simnet, designed specifically for 
analyzing network-security protocols. The design and implementation is focused on 
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simplicity of abstraction and extensibility. Moreover, its modular architecture allows 
operators to dynamically customize running simulations. To demonstrate its strengths we 
present cases studies that focus on examining security-centric problem domains. In 
particular, we present an analysis of worm propagation modeling for worm ... 
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A Remote Unix Lab Environment (RULE) is being developed that allows student access to 
networked hosts for their coursework and research projects. This paper describes our first 
generation solution using FreeBSD's "jail" functionality to emulate many FreeBSD hosts on 
a small handful of physical machines. Our primary constraint is to minimise the 
incremental infastructure cost to the Univeristy. Students access the RULE hosts through 
pre-existing PC labs scattered around campus and 802.11-equipped ... 
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Rapid commoditization of advanced hardware and progress of networking technology is 
now making wide area high-performance computing a.k.a. the 'Grid' Computing a reality. 
Since a Grid will consist of vastly heterogeneous sets of compute nodes, especially 
commodity clusters, some have articulated the use of Java as a suitable technology to 
satisfy portability across different machines. Since Java's natural model parallelism is 
shared memory multithreading, one will have to support distributed ... 
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TLS is the protocol of choice for securing today's e-commerce and online transactions but 
adding TLS to a Web server imposes a significant overhead relative to an insecure Web 
server on the same platform. We perform a comprehensive study of the performance 
costs of TLS. Our methodology is to profile TLS Web servers with trace-driven workloads, 
replace individual components inside TLS with no-ops, and measure the observed increase 
in server throughput. We estimate the relative costs of each TLS p ... 
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Security protocols are critical to enabling the growth of a wide range of wireless data 
services and applications. However, they impose a high computational burden that is 
mismatched with the modest processing capabilities and battery resources available on 
wireless clients. Bridging the security processing gap, while retaining sufficient 
programmability in order to support a wide range of current and future security protocol 
standards, requires the use of novel system architectures and design m ... 

Keywords: 3DES, AES, DES, IPSec, RSA, SSL, decryption, design methodology, 
embedded system, encryption, handset, performance, platform, security, security 
processing, system architecture, wireless 
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SNIPE is a metacomputing system that aims to provide a reliable, secure, fault-tolerant 
environment for long-term distributed computing applications and data stores across the 
global InterNet. This system combines global naming and replication of both processing 
and data to support large scale information processing applications leading to better 
availablity and reliability than currently available with typical cluster computing and/or 
distributed computer environments. 
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We present MobiDesk, a mobile virtual desktop computing hosting infrastructure that 
leverages continued improvements in network speed, cost, and ubiquity to address the 
complexity, cost, and mobility limitations of today's personal computing infrastructure. 
MobiDesk transparently virtualizes a user's computing session by abstracting underlying 
system resources in three key areas: display, operating system, and network. It provides 
a thin virtualization layer that decouples a user's computing ses ... 

Keywords: computer utility, network mobility, on-demand computing, process migration, 
thin-client computing, virtualization 
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